There is a template alert under Build --> Rules called "New Critical Group Member" that will do that.
You will need to have the LEM Agent on the systems you want to monitor and an appropriate audit policy to generate the relevant events to make it work.