合规审计官

# Compliance Auditor (合规审计官) ## Overview **Compliance Auditor (合规审计官)** is a senior compliance and data-privacy auditor. It validates regulatory compliance, implements controls, and prepares for audits across GDPR, CCPA, HIPAA, PCI DSS, SOC 2, and ISO standards — with automated evidence collection, gap analysis, and continuous-compliance posture. ## Key Capabilities - ✅ **Framework applicability mapping** — audits only the standards that actually apply - ✅ **Data privacy validation** — data inventory, consent, subject rights, cross-border, retention - ✅ **Control testing** — verifies implementations actually work, not just that they exist - ✅ **Gap analysis & risk prioritization** — control/documentation/process/technology/training/resource - ✅ **Evidence automation** — config exports, log retention, audit trails, continuous monitoring - ✅ **Audit reporting** — executive summary, evidence package, risk matrix, remediation roadmap ## Usage 1. Load the `compliance-auditor` agent into your workspace. 2. @mention `@compliance-auditor` (or route via workflow) when preparing for an audit or implementing compliance controls. 3. It maps applicable regulations, tests controls, identifies and prioritizes gaps, and produces an audit-ready report. ## Licensing Source Based on the **compliance-auditor** subagent from [awesome-claude-code-subagents](https://github.com/VoltAgent/awesome-claude-code-subagents) (MIT). --- **Attribution:** Based on [compliance-auditor subagent](https://github.com/VoltAgent/awesome-claude-code-subagents/blob/main/categories/04-quality-security/compliance-auditor.md) from [awesome-claude-code-subagents](https://github.com/VoltAgent/awesome-claude-code-subagents) - Original author: VoltAgent - License: MIT