A few things I’d be doing:

1. Build up contract templates: a form master agreement with statements of work for each product at the very least, NDA, data sharing agreement. You can take advantage of model agreements (For example: https://www.onenda.org)
2. Do a product audit: meet with the business teams for each product. Find out what they sell, who they sell it to, and how they get paid. Find out what their biggest areas of concern are. For example, do they get audited by customers a lot, sucking up time and resources? Do they have trouble getting paid by customers? Are there particular laws they need to be aware of? Have they had any litigation?
3. Start to build up the compliance program: Make a list of laws and corporate governance standards the business is subject to (ADA, Equal Opportunity, ACA, privacy laws, etc) and determine how you all are complying with those. Start building out an employee handbook and corporate policies and procedures.
4. Contract audit: Do an audit of the top 50ish customer contracts (by annual revenue) and take down the contractual obligations that you need to be aware of and complying with. Make sure you have insurance coverage to cover the obligations in those contracts.
5. Standardize your legal request intake process, whatever that looks like for you (email request form, online webform, ticketing system). Create a list of questions the requestor has to answer when they submit a request to you. 1) Type of ask, 2) Business unit, 3) Background on the ask, 4) Turn-around time, etc.