You actually don't need to do anything beyond what we tell you to do for PCI. Check out stripe.js. No need for an auditor.