Please be aware that in PostgreSQL, your cluster data directory is a self-contained unit that cannot reliably be restored in parts, as per the documentation here.

Your best hope is to use the full data directory of the old server and to start a server on it, then restore from a dump of the database you get from there:

1. Get a postgresql.conf that fit the configuration on the new host going (orient yourself by the files in the old - which you change here - and new data directories)
2. Find out the user name of the old installation's PostgreSQL superuser - most likely postgres.
3. Create this user name (UNIX user) on the new host, unless it's already there.
4. Give (chown) the old data directory to that user, unless the uid matches the one on the old server.
5. Configure pg_hba.conf in the old data directory to allow connections from local users to the same postgres user name (this is normally the default, but check).
6. Run the old database cluster as the UNIX user with the same name as the old data directory's superuser, e.g. for user postgres:

   sudo -u postgres postgres -D old_data_directory
   
   or with su:
   
   su postgres
   postgres -D old_data_directory
   

7. dump the old database, again with the usual user name, postgres:

   sudo -u postgres pg_dump -p /path/to/socket/for/old/directory database_name > dump_file.sql
   
   becoming postgres with su analogous to above

8. adapt the dump_file.sql to the new server's user names etc; create the empty database with appropriate ownership there
9. scan the database into the new server:

   sudo -u postgres psql -p /path/to/socket/for/new/directory new_database_name
   
   once again, getting postgres privileges using su analogous to above
   
   

That should get you set, or at least show a good path to get there.

First, DON'T capitulate. He is not only an idiot but DANGEROUSLY wrong. In fact, releasing this information would violate the PCI standard (which is what I'm assuming the audit is for since it's a payment processor) along with every other standard out there and just plain common sense. It would also expose your company to all sorts of liabilities.

The next thing I would do is send an email to your boss saying he needs to get corporate counsel involved to determine the legal exposure the company would be facing by proceeding with this action.

This last bit is up to you, but I would contact VISA with this information and get his PCI auditor status pulled.