AI Security & Governance Trainer (Freelance)

Komodo Consulting; Portugal; Remoto; EUR 83.000 - 138.000; Part-time

Vantaggi offerti da questo lavoro

Flexible schedule

Remote work

Descrizione del lavoro

Komodo Consulting seeks an AI Security & Governance professional to design and deliver training sessions as part of our AI and cybersecurity training offerings. This is a freelance, session-based collaboration, compatible with other commitments, working alongside our GRC trainers, with the opportunity to evolve into AI assessment and consulting projects.

You will cover topics from Shadow AI and governance to AI security, explain AI risks to business audiences, and help participants build

Competenze

• Solid background in cybersecurity with hands-on experience in AI/GenAI security, adoption, or governance.
• Experience with enterprise adoption of Generative AI tools and LLM-based applications.
• Knowledge of AI risk frameworks (OWASP Top 10 for LLMs, MITRE ATLAS, NIST AI RMF).
• Experience with AI governance practices: use-case inventory, risk classification, approval workflows, acceptable use policies.

Mansioni

• Design and deliver AI-focused training sessions and workshops across awareness to technical levels.
• Cover topics like Shadow AI, safe use of Generative AI, AI governance in enterprises, and AI security.
• Explain AI risks to business audiences including data exposure, hallucinations, IP concerns.
• Guide participants on building AI governance frameworks with ownership, inventories, risk classifications, approvals, and policies.
• Deliver technical sessions on AI application security including prompt injection, data leakage, integrations, and monitoring.
• Facilitate threat modelling for AI use cases and promote secure-by-design practices across the AI lifecycle.
• Develop training materials such as checklists, decision guides, inventories, threat modelling templates, and scenarios.
• Co-deliver sessions with GRC and cybersecurity trainers ensuring accuracy of AI content.
• Keep training content current with evolving AI threat landscape and regulations.

Conoscenze

Cybersecurity

GenAI security

AI governance

Threat modelling

Trainer experience

Portuguese & English

RAG architecture

ISO 42001

Formazione

ISO 42001 Lead Implementer/Auditor

Descrizione del lavoro

About Us

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

- Consulting — with a focus on strategy, investment analysis, and digital process improvement;

- IT Team Augmentation — helping clients scale and strengthen their tech teams.

The Project

We are seeking an AI Security & Governance professional to design and deliver training sessions as part of our training offer in AI and Cybersecurity. This is a freelance, session-based collaboration, compatible with other professional commitments, working alongside our GRC trainers, with the opportunity to evolve into AI assessment and consulting projects.

You will have the following responsibilities:

• Design and deliver AI-focused training sessions and workshops, ranging from awareness to technical levels;

• Cover topics such as Shadow AI, safe use of Generative AI in the workplace, AI governance in enterprise environments, and AI security;

• Explain AI risks to business audiences, including data exposure, hallucinations, third-party tool risks, and intellectual property concerns;

• Guide participants on building AI governance frameworks, including ownership structures, use-case inventories, risk classification, approval processes, and acceptable use policies;

• Deliver technical sessions on AI application security, covering prompt injection, data leakage, integrations, guardrails, and monitoring;

• Facilitate threat modelling exercises for AI use cases and promote secure-by-design practices across the AI lifecycle;

• Develop training materials including checklists, decision guides, inventory templates, threat modelling templates, and practical scenarios;

• Co-deliver sessions alongside GRC and cybersecurity trainers, ensuring technical accuracy of all AI-related content;

• Keep training content current with the evolving AI threat landscape, emerging tools, and applicable regulations.

You need to have the following skills/experience:

• Solid background in cybersecurity, with at least 2 years of hands-on experience in AI/GenAI security, adoption, or governance;

• Practical experience with enterprise adoption of Generative AI tools and LLM-based applications;

• Strong knowledge of AI-specific risk frameworks, including OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF;

• Experience with AI governance practices, including use-case inventory, risk classification, approval workflows, and acceptable use policies;

• Knowledge of the EU AI Act and its relationship with GDPR and data protection requirements;

• Hands-on understanding of AI application architecture, including RAG, agents, integrations, identity management, secrets handling, and logging;

• Experience with threat modelling methodologies and secure-by-design practices;

• Proven experience as a trainer, speaker, or facilitator, with the ability to adapt content for both non-technical and technical audiences;

• Fluency in Portuguese and English;

• Certifications such as ISO 42001 Lead Implementer/Auditor, IAPP AIGP, CISSP, or a trainer certification (e.g. CCP) are a plus.

Location

Remote in Portugal, with occasional in-person sessions in Portugal. Flexible, session-based schedule.