Cybersecurity & AI Governance Trainer (Freelance)

About Us
Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:
- Consulting — with a focus on strategy, investment analysis, and digital process improvement;
- IT Team Augmentation — helping clients scale and strengthen their tech teams.

About Us
Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:
- Consulting — with a focus on strategy, investment analysis, and digital process improvement;
- IT Team Augmentation — helping clients scale and strengthen their tech teams. The Project We are seeking an experienced Cybersecurity & AI Governance professional to design and deliver training sessions as part of our new training offer in Cybersecurity, AI, and Data. This is a freelance, session-based collaboration, compatible with other professional commitments, with the opportunity to evolve into assessment and consulting projects. You will have the following

responsibilities:
- Design and deliver training sessions and workshops at introductory, practitioner, and deep-dive levels;
- Cover priority topics including Shadow AI, Cybersecurity Essentials, AI Governance & Acceptable Use, and ISO 27001 & NIS2 readiness;
- Develop training materials such as presentations, case studies, checklists, templates, and practical exercises;
- Define learning objectives, agendas, and target audiences for each training session;
- Adapt content to different audiences, from business and management profiles to technical teams;
- Deliver sessions online or in person, including short sessions, multi-session programmes, and executive workshops;
- Collect participant feedback and continuously improve training content;
- Identify client needs raised during training that may lead to assessment or consulting opportunities. You need to have the following skills/experience:
- Solid background in Information Security, GRC, or Security Management (5+ years);
- Proven experience as a trainer, facilitator, or awareness programme lead;
- Strong knowledge of ISO 27001, NIS2, NIST, and GDPR;
- Practical experience in risk management, incident management, and BCP/DRP;
- Knowledge of AI governance, AI security risks, Shadow AI, and the EU AI Act;
- Working knowledge of data governance, information classification, and Privacy by Design;
- Ability to communicate complex topics clearly to non-technical audiences using real-world examples;
- Excellent presentation and facilitation skills, both online and in person;
- Fluency in Portuguese and English;
- Certifications such as ISO 27001 Lead Implementer/Auditor, CISM, CISSP, CIPP/E, ISO 42001, or a trainer certification (e.g. CCP/CAP) are a plus. Location Remote in Portugal, with occasional in-person sessions in Portugal. Flexible, session-based schedule.