1. A method comprising: establishing, by a mobile device, a secure operating environment on the mobile device, wherein the secure operating environment is established on the mobile device independently of a host operating environment on the mobile device; determining, by the secure operating environment, a policy for managing security of an application executing in the secure operating environment, wherein the policy is defined by a plurality of security profiles, each of the plurality of security profiles corresponding to a different level of security from a plurality of levels of security, wherein the plurality of levels of security are for managing the security of the application executing on the mobile device, and wherein the policy identifies one or more security services to perform for each of the plurality of levels of security; detecting, using the policy, an event related to the security of the application; identifying, by the secure operating environment, a security service to perform for managing the security of the application in response to the detected event, wherein the security service is identified from one of the plurality of security profiles in the policy based on a level of security determined for the detected event; and performing, by the secure operating environment, the identified security service.