Cybersecurity & AI Governance Trainer (Freelance)

Komodo Consulting; Lisboa; Remote; EUR 65,000 - 129,000; Full time

Job summary

Komodo Consulting seeks an experienced Cybersecurity & AI Governance trainer for freelance, session-based work in Portugal, with remote delivery and occasional in-person sessions across the country.

You will design and deliver trainings from introductory to deep-dive levels on topics like Shadow AI, Cybersecurity Essentials, AI Governance, ISO 27001 & NIS2 readiness, data governance, and GDPR, adapting content for business, management and technical audiences.

Qualifications

• Solid background in Information Security, GRC, or Security Management.
• Proven trainer, facilitator, or awareness programme lead.
• Strong knowledge of ISO 27001, NIS2, NIST, and GDPR.
• Practical experience in risk management, incident management, and BCP/DRP.
• Knowledge of AI governance, AI security risks, Shadow AI, and the EU AI Act.
• Ability to communicate complex topics clearly to non-technical audiences with real-world examples.
• Excellent presentation and facilitation skills, both online and in person.
• Fluency in Portuguese and English.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CISSP, CIPP/E, ISO 42001, or trainer certification (CCP/CAP) are a plus.

Responsibilities

• Design and deliver training sessions and workshops at introductory, practitioner, and deep-dive levels.
• Cover priority topics including Shadow AI, Cybersecurity Essentials, AI Governance & Acceptable Use, and ISO 27001 & NIS2 readiness.
• Develop training materials such as presentations, case studies, checklists, templates, and practical exercises.
• Define learning objectives, agendas, and target audiences for each training session.
• Adapt content to different audiences, from business and management profiles to technical teams.
• Deliver sessions online or in person, including short sessions, multi-session programmes, and executive workshops.
• Collect participant feedback and continuously improve training content.
• Identify client needs raised during training that may lead to assessment or consulting opportunities.

Skills

Information Security

GRC

Security Management

Trainer / Facilitator

ISO 27001

NIS2

GDPR

Shadow AI

Portuguese fluency

English fluency

Job description

About Us

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

• Consulting — with a focus on strategy, investment analysis, and digital process improvement;
• IT Team Augmentation — helping clients scale and strengthen their tech teams.

About Us

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

• Consulting — with a focus on strategy, investment analysis, and digital process improvement;
• IT Team Augmentation — helping clients scale and strengthen their tech teams.

The Project

We are seeking an experienced Cybersecurity & AI Governance professional to design and deliver training sessions as part of our new training offer in Cybersecurity, AI, and Data. This is a freelance, session-based collaboration, compatible with other professional commitments, with the opportunity to evolve into assessment and consulting projects.

You will have the following responsibilities:

• Design and deliver training sessions and workshops at introductory, practitioner, and deep-dive levels;
• Cover priority topics including Shadow AI, Cybersecurity Essentials, AI Governance & Acceptable Use, and ISO 27001 & NIS2 readiness;
• Develop training materials such as presentations, case studies, checklists, templates, and practical exercises;
• Define learning objectives, agendas, and target audiences for each training session;
• Adapt content to different audiences, from business and management profiles to technical teams;
• Deliver sessions online or in person, including short sessions, multi-session programmes, and executive workshops;
• Collect participant feedback and continuously improve training content;
• Identify client needs raised during training that may lead to assessment or consulting opportunities.

You need to have the following skills/experience:

• Solid background in Information Security, GRC, or Security Management (5+ years);
• Proven experience as a trainer, facilitator, or awareness programme lead;
• Strong knowledge of ISO 27001, NIS2, NIST, and GDPR;
• Practical experience in risk management, incident management, and BCP/DRP;
• Knowledge of AI governance, AI security risks, Shadow AI, and the EU AI Act;
• Working knowledge of data governance, information classification, and Privacy by Design;
• Ability to communicate complex topics clearly to non-technical audiences using real-world examples;
• Excellent presentation and facilitation skills, both online and in person;
• Fluency in Portuguese and English;
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CISSP, CIPP/E, ISO 42001, or a trainer certification (e.g. CCP/CAP) are a plus.

Location

Remote in Portugal, with occasional in-person sessions in Portugal. Flexible, session-based schedule.