This may not be a route you want to take, but we experienced a similar problem while a server was being used for both DEV/PRODUCTION. I created a trigger on the sysjobs table to email me whenever a job was edited/disabled. It works well, but obviously doesn't track what changes were made. In my case it was "enough" to be able to track down the user in question...