AI Security & Governance Trainer (Freelance)

Komodo Consulting; Lisboa; Remote; EUR 83,000 - 152,000; Full time

Job summary

Komodo Consulting seeks an AI Security & Governance professional for remote, session-based freelance work in Portugal. You will design and deliver AI-focused training and workshops, covering governance, security, and risk topics for diverse audiences. The role evolves toward AI assessment and consultancy projects with our GRC trainers.

You will collaborate on current content, stay updated on AI threats, tools, and regulations, and deliver practical scenarios and templates for real-world adoption.

Qualifications

• Solid background in cybersecurity with 2+ years in AI/GenAI security/governance.
• Experience with enterprise adoption of Generative AI tools and LLM-based applications.
• Knowledge of AI risk frameworks: OWASP Top 10 for LLM, MITRE ATLAS, and NIST AI RMF.
• Experience with AI governance: use-case inventories, risk classification, approval workflows, acceptable use policies.
• Knowledge of the EU AI Act and GDPR data protection requirements.
• Hands-on understanding of AI application architecture: RAG, agents, integrations, identity management, secrets handling, logging.
• Threat modelling methodologies and secure-by-design practices.
• Trainer/speaker experience and ability to adapt content for non-technical and technical audiences.
• Fluency in Portuguese and English.
• Certifications such as ISO 42001 Lead Implementer/Auditor, IAPP AIGP, CISSP, or trainer certification (CCP) are a plus.

Responsibilities

• Design and deliver AI-focused training sessions and workshops, from awareness to technical levels.
• Cover topics like Shadow AI, safe use of Generative AI in the workplace, AI governance in enterprise environments, and AI security.
• Explain AI risks to business audiences: data exposure, hallucinations, third-party tool risks, IP concerns.
• Guide participants on building AI governance frameworks: ownership structures, use-case inventories, risk classification, approval processes, acceptable use policies.
• Deliver technical sessions on AI application security: prompt injection, data leakage, integrations, guardrails, monitoring.
• Facilitate threat modelling exercises for AI use cases and promote secure-by-design throughout the AI lifecycle.
• Develop training materials including checklists, decision guides, inventories, threat modelling templates, practical scenarios.
• Co-deliver sessions with GRC and cybersecurity trainers, ensuring technical accuracy of AI content.
• Keep training content current with evolving AI threat landscape and regulations.

Skills

Cybersecurity

AI/GenAI security

AI governance

Threat modelling

Trainer / speaker

Portuguese & English fluency

Education

ISO 42001 Lead Implementer/Auditor

IAPP AIGP

CISSP

Trainer certification (CCP)

Job description

About Us

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

• Consulting — with a focus on strategy, investment analysis, and digital process improvement;
• IT Team Augmentation — helping clients scale and strengthen their tech teams.

About Us

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

• Consulting — with a focus on strategy, investment analysis, and digital process improvement;
• IT Team Augmentation — helping clients scale and strengthen their tech teams.

The Project

We are seeking an AI Security & Governance professional to design and deliver training sessions as part of our training offer in AI and Cybersecurity. This is a freelance, session-based collaboration, compatible with other professional commitments, working alongside our GRC trainers, with the opportunity to evolve into AI assessment and consulting projects.

You will have the following responsibilities:

• Design and deliver AI-focused training sessions and workshops, ranging from awareness to technical levels;
• Cover topics such as Shadow AI, safe use of Generative AI in the workplace, AI governance in enterprise environments, and AI security;
• Explain AI risks to business audiences, including data exposure, hallucinations, third-party tool risks, and intellectual property concerns;
• Guide participants on building AI governance frameworks, including ownership structures, use-case inventories, risk classification, approval processes, and acceptable use policies;
• Deliver technical sessions on AI application security, covering prompt injection, data leakage, integrations, guardrails, and monitoring;
• Facilitate threat modelling exercises for AI use cases and promote secure-by-design practices across the AI lifecycle;
• Develop training materials including checklists, decision guides, inventory templates, threat modelling templates, and practical scenarios;
• Co-deliver sessions alongside GRC and cybersecurity trainers, ensuring technical accuracy of all AI-related content;
• Keep training content current with the evolving AI threat landscape, emerging tools, and applicable regulations.

You need to have the following skills/experience:

• Solid background in cybersecurity, with at least 2 years of hands-on experience in AI/GenAI security, adoption, or governance;
• Practical experience with enterprise adoption of Generative AI tools and LLM-based applications;
• Strong knowledge of AI-specific risk frameworks, including OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF;
• Experience with AI governance practices, including use-case inventory, risk classification, approval workflows, and acceptable use policies;
• Knowledge of the EU AI Act and its relationship with GDPR and data protection requirements;
• Hands‑on understanding of AI application architecture, including RAG, agents, integrations, identity management, secrets handling, and logging;
• Experience with threat modelling methodologies and secure‑by‑design practices;
• Proven experience as a trainer, speaker, or facilitator, with the ability to adapt content for both non‑technical and technical audiences;
• Fluency in Portuguese and English;
• Certifications such as ISO 42001 Lead Implementer/Auditor, IAPP AIGP, CISSP, or a trainer certification (e.g. CCP) are a plus.

Location

Remote in Portugal, with occasional in-person sessions in Portugal. Flexible, session-based schedule.