IT operations
Angel began with identity administration, vulnerability management, incident response and support for SOC 2, PCI DSS and ISO 27001 audits. This grounding informs how he examines the operation of a control, as well as its documentation.
EXTRIMPAThe people behind the work
About EXTRIMPA
Experienced judgment.
Direct involvement.
Technology risk and cybersecurity advisory led by the person responsible for your engagement, from scoping through findings and follow-up.
Founder & Managing Director
Angel Montilla
- CISM
- CRISC
- ISO/IEC 27001 Lead Auditor
Angel brings more than a decade of experience across IT operations, technology risk and information security. His background includes Big Four experience at KPMG and risk and control work at BNY, including BNY Pershing.
At EXTRIMPA, he leads technical discussions, defines the scope and directs delivery. Your team works with him on the evidence, decisions and next steps.
Speak with AngelA specialized firm.
EXTRIMPA brings technology risk, cybersecurity and control experience to private equity teams, buyers, sellers and independent RIAs. We work alongside investment professionals, operating teams, counsel and technology providers to connect evidence with decisions.
The founder leads the technical direction of each engagement. Our work combines defined scope, direct communication and recommendations your team can put into practice. For transactions, this means a clear view of cyber exposure, security-related technical debt and the work needed before or after close.
Experience behind the work
From daily operations to institutional governance.
KPMG
In the second line of defense, he led regional technology risk reviews across the Americas, advised leadership and project teams, and contributed to governance frameworks and review methodologies adopted across the region.
BNY and work with BNY Pershing
At BNY, he worked in the first line of defense governance and control team for the Global Clearing platform. The environment involved regulatory and assurance frameworks including SOX, SOC 1, SEC Rule 15c3-3, FCA CASS and MiFID II.
During his time at BNY, he also worked with BNY Pershing, a provider of clearing and custody services to RIAs and other financial firms.
EXTRIMPA
Angel leads EXTRIMPA’s transaction due diligence and technology risk advisory work, from defining the scope through review, recommendations and follow-up.
These references describe Angel's professional background. They do not imply an affiliation or endorsement of EXTRIMPA by former employers.
Why EXTRIMPA
Strategy. Clarity. Trust.
Three commitments behind every engagement.
Strategy.
Our work supports decisions. Each deliverable gives leadership a clear path forward, with findings connected to the actions they require.
Clarity.
We translate technical complexity into the language of budget approvals and board decisions. Each recommendation is clearly explained, can be traced through follow-up and stands up to scrutiny.
Trust.
Trust is demonstrated through every defensible analysis, every recommendation supported by evidence and every professional decision that places the client’s interests ahead of our own.
How we work with your team
Angel leads the technical evaluation and engagement delivery, so you work directly with the person responsible for the review.
- Set the scope. Agree on the questions the work should answer, the people involved and the decisions it needs to support.
- Review together. Coordinate interviews, evidence reviews and working sessions around your priorities.
- Make the next steps clear. Receive findings and practical recommendations tied to the agreed scope.
U.S. services are offered through EXTRIMPA LLC, a Wyoming limited liability company serving clients nationwide.