Can we set up a custom profile to monitor changes made to the local administrator group on a server?

I've been asked to try and come up with a way to monitor if/when the list of users within the Local Administrators Group on a server has changed. 

I'm trying to think of a way to do this and I'm not sure if that would be through PowerShell or if there is an easier way to do it with SCM or is it even possible to do within SCM. 

Any thoughts?