Cybersecurity & AI Governance Trainer (Freelance)

About Us
Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:
Consulting — with a focus on strategy, investment analysis, and digital process improvement;
IT Team Augmentation — helping clients scale and strengthen their tech teams.
The Project
We are seeking an experienced Cybersecurity & AI Governance professional to design and deliver training sessions as part of our new training offer in Cybersecurity, AI, and Data. This is a freelance, session-based collaboration, compatible with other professional commitments, with the opportunity to evolve into assessment and consulting projects.
You will have the following responsibilities:
Design and deliver training sessions and workshops at introductory, practitioner, and deep-dive levels;
Cover priority topics including Shadow AI, Cybersecurity Essentials, AI Governance & Acceptable Use, and ISO 27001 & NIS2 readiness;
Develop training materials such as presentations, case studies, checklists, templates, and practical exercises;
Define learning objectives, agendas, and target audiences for each training session;
Adapt content to different audiences, from business and management profiles to technical teams;
Deliver sessions online or in person, including short sessions, multi-session programmes, and executive workshops;
Collect participant feedback and continuously improve training content;
Identify client needs raised during training that may lead to assessment or consulting opportunities.
You need to have the following skills/experience:
Solid background in Information Security, GRC, or Security Management (5+ years);
Proven experience as a trainer, facilitator, or awareness programme lead;
Strong knowledge of ISO 27001, NIS2, NIST, and GDPR;
Practical experience in risk management, incident management, and BCP/DRP;
Knowledge of AI governance, AI security risks, Shadow AI, and the EU AI Act;
Working knowledge of data governance, information classification, and Privacy by Design;
Ability to communicate complex topics clearly to non-technical audiences using real-world examples;
Excellent presentation and facilitation skills, both online and in person;
Fluency in Portuguese and English;
Certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CISSP, CIPP/E, ISO 42001, or a trainer certification (e.g. CCP/CAP) are a plus.
Location
Remote in Portugal, with occasional in-person sessions in Portugal. Flexible, session-based schedule.

Work arrangement
Yes