Should they be able to edit the record at all? If not, you could simply remove the edit ability for that object for that one profile.
Otherwise, a validation rule should work well. You can specify the conditions you'd like:
anytime the Owner field changes
it's the profile you're stopping
In actual, correct syntax