1. A method comprising: establishing, by a mobile device, a secure operating environment on the mobile device, wherein the secure operating environment is established on the mobile device independently of a host operating environment on the mobile device; determining, by the secure operating environment, a policy for managing security of an application executing in the secure operating environment, wherein the policy indicates a plurality of security profiles, each of the plurality of security profiles corresponding to a different level of security for managing the security of applications executing on the mobile device, and wherein the policy identifies one or more security services for each of the plurality of security profiles; detecting, using the policy, an event related to the security of the application; identifying, by the secure operating environment, a security service to perform for managing the security of the application in response to the detected event, wherein the security service is identified from one of the plurality of security profiles based on the detected event; and performing, by the secure operating environment, the identified security service.